Update 12 December 2025: Standard Cloud upgrades are scheduled for the weekend of 9–10 January 2026 (details below). We appreciate your patience with the revised schedule. Today we are releasing Jamf Pro 11.23; highlights include:New Settings for Privacy Preferences Policy Control and Platform Single Sign-onJamf has expanded support for additional Privacy Preferences Policy Control restrictions and the Single Sign-on Extensions payload with new computer configuration profile keys. This update enables administrators to define and deploy more granular privacy and security permissions for macOS devices while streamlining the user experience.Return to Service EnhancementYou can now add more than one payload to a configuration profile when configuring Return to Service in a PreStage enrollment. Previously, only one Wi-Fi payload could be used. For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro,

Has anyone had success deploying Cisco Secure Client XDR with Jamf School? We have a fleet of Macs that we’ve been trying to deploy this out to, but everything either fails, or does not install silently.Is there a guide or anything specific for Jamf School?

Hey Jamf Nation! Welcome to another edition of Things to Do for JNUC, 2026 Edition. This JNUC we’re heading to Kansas City, Missouri, so let’s make the most of it. Whether you’re travelling from near or far (I’m still coming from Canada!), here’s a curated list of activities to help you plan your trip. Locals - please share your insider tips! JNUC HighlightsJNUC Party: The Wednesday night bash is always a highlight of great music, food, and networking. Don’t miss it! Vendor Parties: Expect free drinks, tasty bites, and epic giveaways. Jamf Heroes Meetup: Details for 2026 aren’t out yet but keep an eye on Jamf Nation for updates. Official JNUC Info: https://www.jamf.com/jnuc/ SportsKansas City is a sports town! Here’s what might be happening during JNUC week (check official sites for updated schedules):Kansas City Chiefs (NFL): The 2026 schedule should be released in mid-May. Visit https://www.nfl.com or https://www.chiefs.com. Kansas City Royals (MLB): Playoffs could be in full swing i

Friday. Yes. Friday.iOS 26.2.• https://support.apple.com/en-us/100100

We’re excited to launch a new space here in Jamf Nation focused specifically on the needs of Jamf School administrators. Many of us have noticed that, while Jamf Pro discussions are numerous and well-established, Jamf School hasn’t had the same dedicated attention. This group aims to give it the focused community it deserves.My name is Corey Ribble, and I’m a K–12 Admin in the Technology Department at Wayland Union Schools in Wayland, Michigan. After years of conversations about the need for better Jamf School–centered spaces, Tracey reached out to ask if I’d be interested in helping kick off this group, knowing I’ve been a strong supporter of creating a place where Jamf School admins can get the help and advice they need—without digging through mountains of Jamf Pro discussions or unrelated videos.What this group is about:K–12 technology work has its own rhythm, quirks, and triumphs. We balance classrooms, teachers, students, devices, security, and instruction every single day—and Jam

We are having our next meeting on Thursday December 18th, 2025 at 6PM PST. Please RSVP at the link below. 4 Corners December 2025 Meetup · Zoom · Luma  

Like a lot of other Jamf admins I see a small number of Macs that have stopped checking in and sending inventories. I see some that appear to be having problems with MDM. I am curious about what everyone else is doing to solve these issues. Since we also use some other management agents I can see that a lot of the Macs that are having Jamf agent issues are working with the other management agents. They appear to be in use. I wrote a script that leverages the Jamf Management Framework redeployment API command. I was able to deploy it through Tanium to some systems that had stopped checking in and sending inventories. This has worked on some but not on others. For the systems having MDM issues, this may not work since the Jamf Management framework redeployment using the API needs MDM functionality to work. Here’s the current version of the script that I created.#!/bin/zsh --no-rcs:<<ABOUT_THIS_SCRIPT-----------------------------------------------------------------------------------

​We currently have our students set an app age restriction of 12+ in our MDM  Today we came across an app, Grammarly Keyboard, that is now 13+ .  That causes the app to install and then immediately remove.   Our only other option in the MDM is 17+ Anyone else running into this issue? Any other apps in the 13+ category?

So I’ve started seeing an issue with macOS 26.1 trying to set up new machines.The enrollment customization is not passing the user info from the SAML token, which is a known issue but usually sending the workaround profile that sets those attributes works fine. Here is the payload:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0">    <dict>        <key>EnrollmentRealName</key>            <string>$REALNAME</string>        <key>EnrollmentUserName</key>            <string>$USERNAME</string>    </dict></plist>it’s not working now, I’m not even seeing the computer’s username change in Jamf Pro after signing in through the enrollment customization like I used to. Once setup assistant completes, Jamf Connect is installed, but when I get the re-enter your password screen I cannot progress past that sin

The re-launch of the Phoenix Apple Admins User Group Virtual December Meeting is happening in less than a week!This foundational meeting is scheduled for: Date: Thursday, December 18 Time: 6:00 PM - 7:00 PM MST Format: Virtual Meeting via Zoom We strongly encourage all Apple Administrators and interested individuals in the local area to attend this virtual event.Registration is mandatory to secure your spot. RSVP Link: https://luma.com/vap3dwsd Kindly share this announcement with any colleagues or contacts within the region who may benefit from participation in the Phoenix Apple Admins community!

Your configuration may need to be updated on your iPads.  On their tech call today they mentioned adding the device name to the config so that the name will show in the COS.  The info in their PDF did not make sense to me who is not a coder.  With some help from the Jamf AI this is the config that worked for me.  Make sure to change the ouIds to your COS Org Unit ID <dict>  <key>ouIds</key>  <string>1234567890</string>  <key>deviceName</key>  <string>$DEVICENAME</string></dict>

Is there a way to prevent local administrators from removing the JAMF Binary with jamf removeFramework ? We still need local administrator accounts for our professors but don't want them to be able to delete the JAMF Framework.

📢 First Mac Admins India Meetup in Mumbai – Registration-Only InviteThe Mac Admins India community is hosting its first meetup in Mumbai on 16th December (Tuesday), 6–8 PM, and Apple IT professionals across the city are encouraged to join.📍 Venue:WeWork, 21C – CLASSROOMOberoi Commerz II, International Business Park, Oberoi Garden City,Off Western Express Highway, Goregaon (East),Mumbai, MH 400063Agenda:Meet and GreetSpeaker 1: Varun : ICYMI - Tips and Tricks with Jamf Speaker 2: Mohit Dumbani - Apple Care for Enterprises (ACE) Q&A⁠⁠DinnerThis is a registration-only, invite-based event. To request an invite and help us plan capacity, please complete the registration form:👉 https://lnkd.in/eA3SuBSbOpen to Apple IT admins, engineers, and enthusiasts working with macOS, Jamf, and Apple device management in Mumbai.

English version below 👇Hallo Jamf Nation!Wir sind „Jamf Admins Germany“ – eine Community deutschsprachiger Jamf-Admins, die sich rund um Jamf Pro und Apple Enterprise-Administration austauschen möchte. Wir sind drei Jamf-Admins (2x Berlin, 1x Dortmund) aus echten Enterprise-Projekten mit Erfahrungen in Best Practices, Automatisierung, Architektur & Security.Unser Ziel: Wissen teilen und vertiefen, neue technische Impulse geben und eine offene Plattform für Fragen und Use Cases schaffen.Ab Ende Q1 2026 planen wir unser erstes öffentliches virtuelles Meetup, um die Community online besser zu vernetzen und spannende Use Cases vorzustellen.Interesse?Kommt in unseren Slack: #jamf-admins-germanyFolgt uns auf LinkedIn: Jamf Admins GermanyWir freuen uns auf eure Fragen und den Austausch! Hello Jamf Nation!We are “Jamf Admins Germany,” a community of German-speaking Jamf admins focused on Jamf Pro and Apple enterprise management. We are three Jamf admins (2x Berlin, 1x Dortmund) with real-

Hello, I'm new here, I'm a student I got a school ipad and I was able to download absolutely any app I want. I signed in to an apple account then I use spotlight to find an app : like MailChimp or candy crush and when the result from the app store is showed I can press the get button that will install the app. App store is restricted on the device but using spotlight can bypass this. Maybe I'm not in the right place but just wanted to report this bug. I'm on iPados 26.1

 We’re a year into Apple shipping Apple Intelligence (though technically still in Beta) but Apple hasn’t shipped a clear matrix of which features are on-device vs. require Private Cloud Compute (PCC). If you haven’t read part 1, then click here and go back and read it. And then follow up and read part 2, by clicking here. But what if… all that information was hiding on your very Mac in a system diagnostics, your Mac quietly generates a Model Catalog inside sysdiagnose that lists feature availability, languages, and — critically — which resources are server-side! For those that do not know, you can run a system diagnostics and explore the zip file created to potentially find some interesting tidbits about your Mac.Open Terminal.app and typesudo sysdiagnose -f ~/*** Disclaimer, system diagnostics bundles can potentially contain sensitive information *** Follow the prompt and this will create a system diagnostics zip bundle eventually in your home directory. Double click the zip file crea

Erik Adams is inviting you to a scheduled Zoom meeting.Topic: Central Valley Apple Admin Zoom MeetingTime: Dec 10, 2025 02:00 PM Pacific Time (US and Canada)Join Zoom Meetinghttps://kernhigh-org.zoom.us/j/85819455765?pwd=dNI1Fl9koQIpfTyXBh6RL2dFKJwAjI.1Meeting agendahttps://docs.zoom.us/agenda/doc/73855a3c-c2a0-4971-90c2-4fecd7841bfdMeeting ID: 858 1945 5765Passcode: uCe4Hr---One tap mobile+16699006833,,85819455765#,,,,*335416# US (San Jose)+16694449171,,85819455765#,,,,*335416# USJoin instructionshttps://kernhigh-org.zoom.us/meetings/85819455765/invitations?signature=fCZDchNRpCHFtD1voi7lnZzzYjPi3jbHKNlsTLUCis4

With 15.6 and beta macos 26The EA I was using for report back a macs SSID is now broken/blocked.Does any happed to have one that will works? Thanks #!/bin/sh# Jamf Extension attribute to return SSID## Check for SSID namewifi_name=$(ipconfig getsummary en0 | awk -F ' SSID : ' '/ SSID : / {print $2}')# Check if SSID is foundif [ -z "$wifi_name" ]; then    result="No Wi-Fi network found."else    result="$wifi_name"fi# Result for Jamfecho "<result>$result</result>"    

Jamf announced in January that the Jamf Pro Classic API will no longer support basic authentication in a future release. Classic API scripts can still run—administrators just need to make a simple change in how they authenticate. Let’s look at why this change is coming and how to convert Classic API scripts to use bearer tokens for authentication instead of usernames and passwords. The token obtained during this workflow will allow authentication to either the Classic API or the more modern Jamf Pro API. We’ll cover: How bearer tokens improve security Request the first token Parse the token Use the token to send an API command Expire the token Renew the token How bearer tokens improve security This change to move away from supplying usernames and passwords as credentials for authenticating to Jamf Pro is a good thing. Bearer tokens improve security by reducing the number of times credentials are sent to the server. Instead of sending them with every request, a token is sent instead,

We are excited to share that we’ve updated our Privacy Notices across our services to enhance clarity and transparency.Our Privacy Policy has been revised to provide greater transparency regarding our use of AI within our Services, specifically for automated email sentiment analysis, which enables us to better understand and support customer needs while maintaining data privacy standards.Jamf is certified under the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF — international frameworks that ensure robust data protection standards. In alignment with these frameworks, we have updated our Employee Privacy Notice to reflect our continued commitment to the DPF principles. We have also refined the language and defined terms in the notice.You can access the updated Privacy Policy and Employee Privacy Notice on the Jamf Trust Center Privacy page. We encourage you to review these updates. If you have any questions or concerns, please contact

Since the A16 iPad doesn’t have serial numbers engraved anymore, I need a way to identify iPads in cases where the screen has died (water or physical damage). Are there any solutions like this that integrate with JamF School? If not, are there any recommendations?

I’m testing Jamf App Installers.One of my tests is Google Chrome and the other is Firefox.The other day I had an update for Chrome and received this message: When I checked the version of Chrome, it has updated and is now 142.0.7444.176 (Official Build) (arm64) which matches the version in the App Installers I struggled to find a log on the Mac,  However, there is an item under Jamf Pro → Device → History → Management History on the server and that has an entry InstallEnterpriseApplication - Google Chrome - 142.0.7444.176 18/11/2025 at 10:29 AMWhich is a week ago not 24/11/2025 when I had the messageSo, I’m confused.  Why the error message about the failure?  What was the failure?  How can I find out what it was?  Can I suppress messages like this?

It finally happening! Our first virtual meeting!The agenda for the first meeting is to open with some introductions, talk about holiday plans and any exciting JAMF or IT projects for 2026.Event Date - Monday, December 15th 2:00 to 2:30 pm CSTClick on the link below to sign up.https://luma.com/fu90dz82 

I am attempting to roll out Jamf trust for ZTNA. I currently have Crowdstrike falcon installed on all of my fleet. My understanding is a limit of Mac is only one network filter can be active at a time. It seems like Crowdstrike doesn’t play nice with Jamf Trust. Even with the filter disabled I am unable to edit the DNS settings to have default to Jamf. Has anybody successfully deployed both products?

On a specific device, the “Update Inventory” command is successfully sent and works normally.However, when the “Renew MDM Profile” command is sent, it fails with the following message:Error command: The new MDM payload does not match the previous payload. Mismatched key: CheckInURLBecause of this issue, the device cannot renew its MDM profile, and the expiration date is approaching.What is causing this problem, and how can it be resolved?